FictorPay Hack Traced to Diletta Solutions as Losses Near R$40 Million

Overview

• Valor reports the intrusion targeted Campinas-based software provider Diletta Solutions, affecting multiple client fintechs with roughly R$40 million in illicit transfers.
• At least R$26 million was taken from FictorPay, which says its own core systems were not impacted and that the irregular activity originated at a third-party provider.
• Diletta confirms it was victimized, says it is cooperating with police, and reports no identified involvement of personal data so far.
• The central bank detected atypical flows linked to the case and flagged Celcoin, with sources saying no Banco Central systems were breached.
• Celcoin states it blocked unusual transactions and is assisting recovery efforts, as investigators examine a playbook involving coerced or suborned credentials similar to prior attacks that prompted tighter BC limits on certain Pix and TED transfers.